hi!
   sorry to include this.

installing openssh on my redhat6.2 box is easy.. got tcp-wrappers
working. thanks for all your help.

but i also have solaris2.6 box and i was able to build sshd using

./configure --with-libwrap=/usr/lib

but restrictions from /etc/hosts.allow and deny is not working! any
host can ssh to my solaris2.6 box.   i tried building with

./configure --with-tcp-wrappers  or combination of both options but its
giving me an error saying 

checking for libwrap... configure: error: *** libwrap missing

hope you can help though its solaris.

thanks.
ina patricia


--- Raymund dos Remedios <[EMAIL PROTECTED]> wrote:
> To enable tcp wrappers for ssh you will need to include
> 
> --with-tcp-wrappers  and I believe you will need to have the
> tcp_wrappers 
> package installed so that you would have access to libwrap.a
> 
> You will have to run the sshd from the inetd.  Which is why if I
> recall 
> someone posted that you run the sshd -i.
> 
> It is not a recommended way of running the daemon  ...
> 
> extract of man page:
> 
> "-i      Specifies that sshd is being run from inetd.  sshd is
> normally
>              not run from inetd because it needs to generate the
> server key
>              before it can respond to the client, and this may take
> tens of
>              seconds.  Clients would have to wait too long if the key
> was re�
>              generated every time.  However, with small key sizes
> (e.g., 512)
>              using sshd from inetd may be feasible."
> 
> If you run the daemon stand alone and you wish to restrict users who
> can log 
> in using ssh, you can configure the "AllowUsers" , "DenyUsers",
> "AllowGroups" 
> , and/or "DenyUsers" keyword in the sshd_config file.  There are
> various 
> other configuration keywords that allow you to configure logging
> levels and 
> address restrictions among other things.
> 
> Hope this helps...
> 
> Raymund
> _
> Philippine Linux Users Group. Web site and archives at
> http://plug.linux.org.ph
> To leave: send "unsubscribe" in the body to
> [EMAIL PROTECTED]
> 
> To subscribe to the Linux Newbies' List: send "subscribe" in the body
> to [EMAIL PROTECTED]


__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]

Reply via email to